CVE-2021-4079: Out of bounds write in WebRTC

Reference Links

• https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1265806
• https://security.gentoo.org/glsa/202208-25
• https://www.debian.org/security/2022/dsa-5046
• https://security-tracker.debian.org/tracker/CVE-2021-4079

Parent vulnerabilities

(Appears in the following advisories)

• 7014601772789068319

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-4052
• CVE-2021-4053
• CVE-2021-4054
• CVE-2021-4317
• CVE-2021-4078
• CVE-2021-4055
• CVE-2021-4056
• CVE-2021-4057
• CVE-2021-4058
• CVE-2021-4059
• CVE-2021-4061
• CVE-2021-4062
• CVE-2021-4063
• CVE-2021-4064
• CVE-2021-4065
• CVE-2021-4066
• CVE-2021-4067
• CVE-2021-4068

Frequently Asked Questions

• What is CVE-2021-4079?

  CVE-2021-4079 is a vulnerability in WebRTC in Google Chrome that allows a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.

• How does CVE-2021-4079 affect Google Chrome?

  CVE-2021-4079 affects Google Chrome versions prior to 96.0.4664.93.

• How can a remote attacker exploit CVE-2021-4079?

  A remote attacker can exploit CVE-2021-4079 by sending crafted WebRTC packets to the target system, potentially causing heap corruption.

• Which versions of Google Chrome are affected by CVE-2021-4079?

  Google Chrome versions prior to 96.0.4664.93 are affected by CVE-2021-4079.

• Where can I find more information about CVE-2021-4079?

  More information about CVE-2021-4079 can be found at the Debian security tracker: https://security-tracker.debian.org/tracker/CVE-2021-4079